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AMENDMENTS TO THE CLAIMS 

Upon entry of this amendment, the following listing of claims will replace all prior 
versions and listings of claims in the pending application. 

Listing of Claims 

Please amend claim 1 as follows: 

1 . (Currently amended) A method for virtualizing access to native resources, the method 
comprising: 

receiving a request to access a native resource provided by an operating system from a 
process executing within a context of an isolation environment including an application isolation 
layer and a user isolation layer, the request including a virtual name for the native resource; 

determining that a rule action specifying remap is associated with the virtual name 
included in the received request; 

forming a literal name for the native resource, the literal name identifying a literal native 
resource of the same type as the requested resource; and 

issuing to the operating system a request to access the native resource, the request 
including the determined literal name for the native resource. 

2. (Previously Presented) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access a named system object, the request including a virtual name for the system 
object. 

3. (Previously Presented) The method of claim 2 wherein forming a literal name further 
comprises: 

determining a rule associated with the virtual name included in the received request; and 
using the determined rule to form a literal name for the system object that identifies a 
literal system object. 

4. (Previously Presented) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
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environment to access a file system element, the request including a virtual name for the file 
system element. 

5. (Previously Presented) The method of claim 4 wherein forming a literal name further 
comprises: 

determining a rule associated with the virtual name included in the received request; and 
using the determined rule to form a literal name for the file system element that identifies 
a literal file system element. 

6. (Previously Presented) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access a registry key, the request including a virtual name for the registry key. 

7. (Previously Presented) The method of claim 6 wherein forming a literal name further 
comprises: 

determining a rule associated with the virtual name included in the received request; and 
using the determined rule to form a literal name for the registry key that identifies a literal 
registry key. 

8. (Previously Presented) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access one of a window and a window class, the request including one of a 
virtual name for the window and a virtual name for the window class. 

9. (Previously Presented) The method of claim 8 wherein forming a literal name further 
comprises: 

determining a rule associated with the virtual name included in the received request; and 
using the determined rule to form a literal name for the one of a virtual name for the 

window and a virtual name for the window class that identifies one of a literal window name and 

a literal window class. 

10. (Previously Presented) The method of claim 1 wherein forming a literal name further 
comprises: 
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accessing a rules engine to determine a rule associated with the virtual name received in 
the request; and 

forming a literal name for the native resource responsive to the determined rule, the 
formed literal name identifying a literal native resource of the same type as the requested 
resource. 

11. (Previously Presented) The method of claim 1 further comprising: receiving a handle from 
the operating system identifying the accessed object. 

12. (Previously Presented) The method of claim 1 1 further comprising: transmitting the handle to 
the process. 

13. (Previously Presented) The method of claim 1 wherein forming a literal name further 
comprises: determining, by the remap rule, the literal name of the native resource for the virtual 
name of the native resource. 

14. (Previously Presented) A computer implemented apparatus provided by an operating system 
executing on a processor of a computer and virtualizing access to native resources, the apparatus 
comprising: 

a hooking mechanism receiving a request to access a native resource from a process 
executing in the context of an isolation environment including an application isolation layer and 
a user isolation layer, the request including a virtual name for the native resource; 

a rules engine storing a rule action associated with the virtual name included in the 
received request, the rule action specifying remap; 

a name virtualization engine forming a literal name for the native resource, the formed 
literal name identifying a literal native resource of the same type as the requested resource; and 
an interface of an operating system executing on a processor of a computer, the interface 
requesting access to the identified literal native resource. 

15. (Original) The apparatus of claim 14 wherein the hooking mechanism intercepts a request to 
open a native resource. 

16. (Original) The apparatus of claim 14 wherein the hooking mechanism intercepts a request to 
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17. (Cancelled). 

18. (Previously Presented) The apparatus of claim 14 wherein the rules engine comprises a 
database. 

19. (Previously Presented) The apparatus of claim 14 wherein the rule engine stores a rule action 
to determine the literal name of the native resource from the virtual name of the native resource. 

20. (Original) The apparatus of claim 14 wherein the hooking mechanism comprises a file 
system filter driver. 

21. (Original) The apparatus of claim 14 wherein the hooking mechanism comprises a mini-filter. 

22. (Original) The apparatus of claim 14 wherein a native file system comprises the hooking 
mechanism. 
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